Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/f7bdad51-4291-3156-9d34-def56833dace.roa
File:                     f7bdad51-4291-3156-9d34-def56833dace.roa (raw, json)
Hash identifier:          ICbcdU/pbt+lQnCOTJDAK9nx7WvPwS4Lp508ClJleOQ=
Subject key identifier:   E6:C0:A1:FB:CD:59:B5:4B:69:B1:AD:14:DC:CE:82:E1:03:40:C4:04
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584561285399E35BA7962EFE2500
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/f7bdad51-4291-3156-9d34-def56833dace.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     14618
IP address blocks:        2602:277:d00::/47 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:53:99:e3:5b:a7:96:2e:fe:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=ec0cf00e-2db8-489f-8598-13980af585cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:1d:55:0c:72:d2:3a:dc:20:b0:08:b4:cb:
                    73:bf:5e:85:d9:43:9f:90:c5:10:21:a0:66:ec:06:
                    2b:b3:20:9d:04:00:e7:27:4b:e1:73:bd:eb:12:2b:
                    5e:e6:81:c8:5d:5e:d7:25:f2:6a:c2:d6:32:bc:9d:
                    73:2d:21:a2:6f:0a:6d:e5:54:95:73:b0:9d:84:d5:
                    c9:3f:27:5d:9b:b2:bc:a8:5b:8e:87:e1:ab:76:9c:
                    b6:b3:4f:44:c3:d9:a5:ce:ea:09:17:95:68:ab:f4:
                    74:b6:ad:6a:12:63:6d:ce:89:02:5e:69:7a:e2:53:
                    a9:20:1a:4e:0f:0b:31:12:7c:1b:df:5f:05:c4:b5:
                    07:75:f4:c5:bb:8e:b2:ad:7a:c8:a7:b9:88:99:47:
                    b4:fe:3a:b3:d2:a6:3d:40:0a:55:76:aa:ec:a4:ee:
                    42:54:85:46:2a:9e:09:53:9d:2e:06:33:31:60:93:
                    18:8e:9b:8e:d7:b0:73:69:8d:74:3c:3b:8f:14:3d:
                    d6:49:00:9e:5f:a6:3f:c6:e8:1d:8d:ea:ef:e0:6e:
                    bc:ad:f1:74:75:64:63:b7:92:04:05:58:13:d2:a7:
                    35:0e:e7:fc:75:76:34:91:2b:5f:5c:59:b0:df:c8:
                    50:4b:a3:8b:1c:11:fc:16:b4:a0:ee:1b:e6:94:d1:
                    0b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C0:A1:FB:CD:59:B5:4B:69:B1:AD:14:DC:CE:82:E1:03:40:C4:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/f7bdad51-4291-3156-9d34-def56833dace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d00::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:37:38:47:e2:e2:8c:ce:28:c9:1c:4c:54:22:c4:00:53:
         a7:cd:4e:53:a1:c3:ce:cd:b3:5f:78:e1:75:34:9d:0c:36:56:
         0f:00:85:0d:2d:ea:8f:c0:77:85:00:92:b1:75:67:3f:63:20:
         5c:8d:9d:fd:94:05:6e:64:2a:6e:a1:a5:84:9d:45:88:26:1c:
         64:d0:ed:b7:e6:f2:62:05:64:08:31:54:51:e8:71:c1:00:01:
         24:05:13:66:01:89:9f:92:bb:44:65:da:4a:89:1d:c9:9f:d7:
         1b:b7:df:85:d3:41:77:90:3e:44:98:36:c9:b0:31:f5:c9:dc:
         32:0a:6d:4f:c2:a4:71:7e:b0:76:49:c1:ee:c6:21:d0:e4:01:
         b5:79:9b:5c:43:46:03:31:95:e0:a7:42:18:ed:38:6b:cb:2f:
         b7:07:ac:07:64:69:a7:52:07:25:20:2f:dc:fb:cd:1d:71:9e:
         d2:39:9d:1f:43:46:47:aa:5b:1a:c0:5d:c9:ae:04:68:fd:67:
         b8:22:ab:57:8d:b7:b2:17:d5:76:4d:f0:74:ed:74:6c:4c:13:
         5f:aa:28:1b:94:e4:68:44:aa:3d:9c:b8:8b:9c:11:1b:c3:59:
         c8:8b:d6:49:8a:de:42:29:f1:d3:f0:a8:39:4e:90:55:21:7d:
         b5:53:d7:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVhKFOZ41unli7+JQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2
ZGUzMB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
ZWMwY2YwMGUtMmRiOC00ODlmLTg1OTgtMTM5ODBhZjU4NWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohAdVQxy0jrcILAItMtzv16F2UOfkMUQIaBm
7AYrsyCdBADnJ0vhc73rEite5oHIXV7XJfJqwtYyvJ1zLSGibwpt5VSVc7CdhNXJ
Pyddm7K8qFuOh+Grdpy2s09Ew9mlzuoJF5Voq/R0tq1qEmNtzokCXml64lOpIBpO
DwsxEnwb318FxLUHdfTFu46yrXrIp7mImUe0/jqz0qY9QApVdqrspO5CVIVGKp4J
U50uBjMxYJMYjpuO17BzaY10PDuPFD3WSQCeX6Y/xugdjerv4G68rfF0dWRjt5IE
BVgT0qc1Duf8dXY0kStfXFmw38hQS6OLHBH8FrSg7hvmlNELVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFObAofvNWbVLabGtFNzOguEDQMQEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx
MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvZjdiZGFkNTEtNDI5MS0z
MTU2LTlkMzQtZGVmNTY4MzNkYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj
MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl
NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi
MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgICdw0A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF6DNzhH4uKMzijJHExUIsQAU6fNTlOhw87Ns1944XU0nQw2Vg8A
hQ0t6o/Ad4UAkrF1Zz9jIFyNnf2UBW5kKm6hpYSdRYgmHGTQ7bfm8mIFZAgxVFHo
ccEAASQFE2YBiZ+Su0Rl2kqJHcmf1xu334XTQXeQPkSYNsmwMfXJ3DIKbU/CpHF+
sHZJwe7GIdDkAbV5m1xDRgMxleCnQhjtOGvLL7cHrAdkaadSByUgL9z7zR1xntI5
nR9DRkeqWxrAXcmuBGj9Z7giq1eNt7IX1XZN8HTtdGxME1+qKBuU5GhEqj2cuIuc
ERvDWciL1kmK3kIp8dPwqDlOkFUhfbVT184=
-----END CERTIFICATE-----
Generated at Thu May 2 08:56:30 2024 by rpki-client on console-fra.rpki-client.org